CVE-2021-35937CWE-59

A race condition vulnerability was found in rpm

published August 25, 2022

CVSS
—
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2022-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    A race condition vulnerability was found in rpm
    cvelistv5